last executing test programs: 6m15.775987265s ago: executing program 4 (id=68): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') socket$inet6(0xa, 0x2, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) read$FUSE(r5, &(0x7f0000008380)={0x2020}, 0x2020) 6m3.961215414s ago: executing program 4 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) 6m2.434140881s ago: executing program 4 (id=94): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg(r1, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x103, 0xc, 0x4, 0x5c, 0x1], 0x0, 0x0}, 0x78) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000500)={0xd21, 0x200, 0x7, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 6m0.159516617s ago: executing program 4 (id=100): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) 5m59.846539773s ago: executing program 4 (id=103): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 5m59.010156095s ago: executing program 4 (id=106): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x28ae, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000f2}]}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4) 5m58.091183492s ago: executing program 32 (id=75): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5m42.177737949s ago: executing program 33 (id=106): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x28ae, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000f2}]}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4) 4m31.247872378s ago: executing program 3 (id=268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m31.053368088s ago: executing program 3 (id=270): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f0000000f80)=""/212, 0xd4, 0x73) 4m30.792162431s ago: executing program 3 (id=272): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x20004800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@ptr, @const, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f]}}, &(0x7f0000001400)=""/149, 0x51, 0x95, 0x1}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r4, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x1d, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m30.073401418s ago: executing program 3 (id=276): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noload}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002f40)='./bus\x00', 0x1020020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4m29.166830034s ago: executing program 3 (id=277): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_pidfd_open(r0, 0x0) tgkill(r0, r0, 0x2) 4m26.065443551s ago: executing program 3 (id=286): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000500)={0x29, 0x3, 0x0, {0x2, 0x8, 0x0, 'group_id'}}, 0x29) 4m25.793050605s ago: executing program 34 (id=286): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000500)={0x29, 0x3, 0x0, {0x2, 0x8, 0x0, 'group_id'}}, 0x29) 2m53.393047953s ago: executing program 6 (id=528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0xc000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 2m50.525292598s ago: executing program 6 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000040)='!^\x00', 0x50a40, &(0x7f00000000c0)={@align, {0xa3, 0x4, 0x4, 0x53d}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000280)=0x8}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000400)={0x2, 0x6, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m47.302339542s ago: executing program 7 (id=546): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 2m46.282792903s ago: executing program 7 (id=550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() syz_emit_ethernet(0x2b, &(0x7f0000002200)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, "e1"}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2m41.574309002s ago: executing program 7 (id=556): r0 = syz_open_dev$loop(0x0, 0x7, 0x142ba3) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x7fffffffffffffff, 0x7]}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x4d) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m41.104868776s ago: executing program 7 (id=557): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000740), 0x6e, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10100) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a636e17511665d17a75b85d40a3803b7cc0e5c1c442c98362dee6b829b54c5b2126b41607cb41547f86c5d8", @ANYRES16=r5, @ANYBLOB="698825bd7000fcdbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r6, 0x0, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)=0x0) sched_getaffinity(r8, 0x8, &(0x7f0000000100)) 2m40.026244051s ago: executing program 7 (id=559): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @empty, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {{@in=@multicast1, 0x4d4, 0x2b}, @in6=@mcast1, {@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e22, 0x5, 0x4e20, 0x2, 0xa, 0x80, 0x10}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e21, 0x5, 0x4e22, 0x2, 0x2, 0x20, 0x80, 0xff}, {0x1000, 0x8001, 0x0, 0xe6c, 0x8, 0x4, 0x9, 0xd81}, {0xf61, 0x4499, 0x0, 0x100000000}, 0xb, 0x6e6bb8, 0x0, 0x0, 0x3, 0x2}, 0x81, 0x8, 0x8, 0x70bd29}}, 0x128}}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000002c0)='rxrpc_s\x00', 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000050000002c02020900000000000000000000000000000000000000bb1800000000000000006c00000000000000"], 0x40}, 0x0) r6 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r6, &(0x7f0000000240), 0xb375) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@delalloc}, {@quota}]}, 0x1, 0x507, &(0x7f0000003180)="$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") write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18c6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe81, 0x0) write$UHID_INPUT(r7, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2m36.031717153s ago: executing program 6 (id=565): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x9) 2m35.228631415s ago: executing program 7 (id=567): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x3, 0x0, 0xfffffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 2m34.976987077s ago: executing program 35 (id=567): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x3, 0x0, 0xfffffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 2m34.941120689s ago: executing program 6 (id=570): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m33.318416981s ago: executing program 6 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000a00)={0xeeee8000, 0x0, 0x1}) close(r1) 2m31.445727626s ago: executing program 6 (id=579): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) 2m31.198576649s ago: executing program 36 (id=579): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) 45.156804859s ago: executing program 8 (id=902): syz_open_dev$evdev(&(0x7f0000000000), 0x80001, 0x38f180) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x1000}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000004000090010"], 0x40) 43.440520846s ago: executing program 8 (id=905): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x4d) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.900916924s ago: executing program 8 (id=910): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg(r1, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x103, 0xc, 0x4, 0x5c, 0x1], 0x0, 0x0}, 0x78) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000500)={0xd21, 0x200, 0x7, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 41.602519839s ago: executing program 8 (id=911): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f00000036c0)="$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") syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)={[{@bsdgroups}, {@mblk_io_submit}, {@data_journal}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}], [{@smackfsdef={'smackfsdef', 0x3d, '#! '}}]}, 0x6, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 40.61776389s ago: executing program 8 (id=914): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x840, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) read$FUSE(r0, 0x0, 0x0) 37.732381686s ago: executing program 8 (id=919): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x2, 0xd, 0x4]}, &(0x7f0000000140)=0x44) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19}}], 0x18}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x20008000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 36.725546707s ago: executing program 37 (id=919): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x2, 0xd, 0x4]}, &(0x7f0000000140)=0x44) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19}}], 0x18}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x20008000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22.640494772s ago: executing program 1 (id=955): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 21.538370367s ago: executing program 1 (id=956): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 21.278551331s ago: executing program 1 (id=957): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x9, 0x6, 0xfbb, 0xfff, 0x7}}, 0x118) 21.098217469s ago: executing program 1 (id=959): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x3, 0x1517, &(0x7f0000000440)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x18a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x8000000000000001, 0x3, 0x5, 0xfffffffb}) 20.49436094s ago: executing program 1 (id=962): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "ff"}, @main=@item_4={0x3, 0x0, 0x8, "a2d3ebad"}]}}, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 19.026358615s ago: executing program 1 (id=967): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0x0, 0xfffc}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0) 18.605846616s ago: executing program 38 (id=967): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0x0, 0xfffc}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0) 16.122816013s ago: executing program 9 (id=980): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file1\x00', 0x1805a, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES16=0x0], 0xff, 0x10652, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x3, 0xfffffffffffff800, 0x1, 0x1}) 12.159808003s ago: executing program 9 (id=991): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) futimesat(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0xffffffff, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xac) openat$incfs(r10, 0x0, 0x0, 0x1ae) socket$pptp(0x18, 0x1, 0x2) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 10.976988733s ago: executing program 9 (id=993): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() syz_emit_ethernet(0x2b, &(0x7f0000002200)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, "e1"}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 9.45799631s ago: executing program 0 (id=1000): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x14, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d35458dd4992838b9f66ad8e9a29b00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) 9.373889965s ago: executing program 5 (id=1001): syz_open_dev$evdev(&(0x7f0000000000), 0x80001, 0x38f180) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x40000, 0x400) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x1000}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000004000090010"], 0x40) 9.329009527s ago: executing program 0 (id=1002): unshare(0x2040400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@init_itable}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@lazytime}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x1c8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0xc, 0xffffffffffffffff, 0x3ff, 0x0, 0x8000000000000001, 0xfffffffffe000005}) 9.249322851s ago: executing program 9 (id=1003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 8.385212885s ago: executing program 5 (id=1004): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 8.310142098s ago: executing program 9 (id=1005): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)={0x28, 0x4, 0x0, {0x1, 0x5}}, 0x28) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.198187244s ago: executing program 0 (id=1006): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x103, 0xc, 0x4, 0x5c, 0x1], 0x0, 0x0}, 0x78) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000500)={0xd21, 0x200, 0x7, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 7.009329215s ago: executing program 9 (id=1007): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e08007b0c01c8008100be46b34fb09120933a419d54e4767cebb9690b76aa6c0d207f92b042bab739e3a0a315b4"], 0xb) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, 0xffffffffffffffff, 0x4b000) 6.972915696s ago: executing program 0 (id=1008): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@barrier}, {@delalloc}, {@nombcache}]}, 0x1, 0xbe0, &(0x7f0000004a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818850, &(0x7f0000000140)={[{@shortname_mixed}, {@shortname_lower}, {@utf8no}]}, 0x1, 0x374, &(0x7f0000000600)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) request_key(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{0x8c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x38, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18, 0xff1c0fb8dcb1527f, 0x0, {0xe}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) 6.607283245s ago: executing program 2 (id=1009): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x2, 0xd, 0x4]}, &(0x7f0000000140)=0x44) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19}}], 0x18}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x20008000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x7, 0x1, 0x6, 0xc002, 0x5, 0x7, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0x2, 0xfd]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.30629545s ago: executing program 2 (id=1010): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mlock(&(0x7f0000372000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.298980282s ago: executing program 5 (id=1011): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071101c0000000000950000000000000072c9ed82"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0xc00, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000067c0)={0x0, 0x0, 0x7fffffff}) gettid() syz_clone3(&(0x7f0000001ac0)={0x10000, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0xffffffffffffffff], 0x1}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = memfd_create(&(0x7f0000000300)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\x7fZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\x1a\xf3\x97\xc4\x9a\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e0300006c0000010000010097700000fe03200001"], 0x79) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.006282647s ago: executing program 2 (id=1012): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x80) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x2090) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$tun(r6, 0x0, 0x5e) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r7, &(0x7f00000054c0)={0x2020}, 0x2020) 3.866335474s ago: executing program 0 (id=1013): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r0, &(0x7f0000000400), 0x0, 0x40000, 0x400) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x1000}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000004000090010"], 0x40) 3.681176524s ago: executing program 5 (id=1014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3.243193446s ago: executing program 5 (id=1015): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@usrquota}, {@inlinecrypt}, {@noload}, {@errors_continue}, {@noquota}, {@delalloc}, {@barrier}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xd) 3.078236594s ago: executing program 2 (id=1016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x6, &(0x7f0000000200)=[{0x7, 0x16, 0x6, 0x5}, {0x0, 0xd, 0x40, 0x6}, {0xff, 0x4, 0xff, 0x9}, {0x0, 0x3, 0x8, 0x101}, {0x1, 0x5b, 0x5, 0x400000}, {0x3, 0x2, 0x1, 0x42c2744a}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.015528128s ago: executing program 2 (id=1017): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x103, 0xc, 0x4, 0x5c, 0x1], 0x0, 0x0}, 0x78) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000500)={0xd21, 0x200, 0x7, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.96901198s ago: executing program 0 (id=1018): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00000200"/172], 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 53.186297ms ago: executing program 2 (id=1019): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x2, 0xd, 0x4]}, &(0x7f0000000140)=0x44) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19}}], 0x18}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x20008000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000500)={[0x7, 0x1, 0x6, 0xc002, 0x5, 0x7, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0x2, 0xfd]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 5 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0xc000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) kernel console output (not intermixed with test programs): :aa:3e) already exists on: batadv_slave_0 [ 223.358752][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.370503][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.381795][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.420298][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.439859][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.464185][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.475447][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.516074][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.526291][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.537326][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.549770][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.554163][ T5868] Alternate GPT is invalid, using primary GPT. [ 223.560956][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.582254][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.593292][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.597863][ T5868] loop2: p2 p3 p7 [ 223.641307][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.738822][ T5622] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.754144][ T5622] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.765847][ T5622] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.779461][ T5622] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.896179][ T5205] udevd[5205]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.918730][ T5177] udevd[5177]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 224.104086][ T5276] udevd[5276]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 224.769606][ T21] usb 6-1: USB disconnect, device number 5 [ 224.788385][ T5880] device syzkaller0 entered promiscuous mode [ 225.050955][ T5890] binder: 5889:5890 ioctl c0306201 200000000080 returned -14 [ 225.165198][ T4747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.173087][ T4747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.228691][ T5903] befs: (nullb0): invalid magic header [ 225.852855][ T5890] netlink: 'syz.6.332': attribute type 12 has an invalid length. [ 225.916820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.025079][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.032957][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.114141][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.597674][ T5925] loop6: detected capacity change from 0 to 512 [ 226.698901][ T5925] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.884165][ T5925] EXT4-fs (loop6): 1 truncate cleaned up [ 226.889862][ T5925] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000203,stripe=0x000000000000000c,noblock_validity,,errors=continue. Quota mode: none. [ 227.503055][ T5909] loop1: detected capacity change from 0 to 40427 [ 228.402668][ T5909] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 228.410724][ T5909] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.780462][ T5909] F2FS-fs (loop1): invalid crc value [ 228.993314][ T5909] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 229.056430][ T5944] loop2: detected capacity change from 0 to 1024 [ 229.102449][ T5954] befs: (nullb0): invalid magic header [ 229.710104][ T5944] EXT4-fs (loop2): Ignoring removed bh option [ 229.744931][ T5944] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 229.744931][ T5944] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 229.744931][ T5944] [ 229.863333][ T5944] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.904160][ T5960] binder: 5959:5960 ioctl c0306201 200000000080 returned -14 [ 230.091839][ T5944] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,noblock_validity,init_itable=0x0000000000004068,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,dioread_nolock,,errors=continue. Quota mode: writeback. [ 230.120809][ T5960] netlink: 'syz.1.344': attribute type 12 has an invalid length. [ 230.195020][ T4229] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 230.363367][ T26] audit: type=1326 audit(1774384823.352:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.5.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f175d24b799 code=0x0 [ 230.483740][ T4229] usb 8-1: Using ep0 maxpacket: 32 [ 230.734281][ T4229] usb 8-1: unable to get BOS descriptor or descriptor too short [ 230.896928][ T5944] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.342: Allocating blocks 449-513 which overlap fs metadata [ 230.953311][ T4229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 231.251854][ T5980] befs: (nullb0): invalid magic header [ 231.344354][ T4229] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 231.990875][ T4229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.041595][ T4229] usb 8-1: Product: syz [ 232.060826][ T4229] usb 8-1: Manufacturer: syz [ 232.076826][ T4229] usb 8-1: SerialNumber: syz [ 232.182093][ T5984] 9pnet: bogus RWRITE count (2 > 1) [ 233.233415][ T4229] usb 8-1: USB disconnect, device number 2 [ 233.611276][ T6011] befs: (nullb0): invalid magic header [ 233.799247][ T5177] udevd[5177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.276726][ T6013] binder: 6012:6013 ioctl c0306201 200000000080 returned -14 [ 234.286725][ T6013] netlink: 'syz.1.359': attribute type 12 has an invalid length. [ 235.182482][ T6031] befs: (nullb0): invalid magic header [ 235.602988][ T6033] loop1: detected capacity change from 0 to 16 [ 235.682830][ T6037] loop7: detected capacity change from 0 to 16 [ 237.665768][ T5771] Bluetooth: hci5: command 0x0406 tx timeout [ 238.332541][ T6037] erofs: (device loop7): mounted with root inode @ nid 36. [ 238.430933][ T6037] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 238.553407][ T6037] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 238.833934][ T6063] befs: (nullb0): invalid magic header [ 240.056159][ T6066] befs: (nullb0): invalid magic header [ 240.066463][ T6070] loop1: detected capacity change from 0 to 256 [ 240.192773][ T6071] binder: 6061:6071 ioctl c0306201 200000000080 returned -14 [ 240.303326][ T6070] FAT-fs (loop1): Directory bread(block 64) failed [ 240.359761][ T6070] FAT-fs (loop1): Directory bread(block 65) failed [ 240.417319][ T6070] FAT-fs (loop1): Directory bread(block 66) failed [ 240.449436][ T6069] netlink: 'syz.7.371': attribute type 12 has an invalid length. [ 240.488228][ T6070] FAT-fs (loop1): Directory bread(block 67) failed [ 240.531410][ T6070] FAT-fs (loop1): Directory bread(block 68) failed [ 241.323391][ T6079] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 241.489766][ T6070] FAT-fs (loop1): Directory bread(block 69) failed [ 241.916409][ T6070] FAT-fs (loop1): Directory bread(block 70) failed [ 241.941738][ T6070] FAT-fs (loop1): Directory bread(block 71) failed [ 242.088023][ T6070] FAT-fs (loop1): Directory bread(block 72) failed [ 242.111556][ T6084] loop6: detected capacity change from 0 to 512 [ 242.143368][ T6070] FAT-fs (loop1): Directory bread(block 73) failed [ 242.219604][ T6084] EXT4-fs (loop6): Test dummy encryption mode enabled [ 242.293366][ T6084] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 259)! [ 242.373845][ T6084] EXT4-fs (loop6): group descriptors corrupted! [ 243.282221][ T6096] device syzkaller0 entered promiscuous mode [ 243.809718][ T6109] loop5: detected capacity change from 0 to 512 [ 243.959328][ T6109] EXT4-fs (loop5): Ignoring removed nobh option [ 244.038324][ T6109] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 244.477135][ T6109] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 244.545971][ T6109] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.382: inode has both inline data and extents flags [ 245.290722][ T6109] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.382: couldn't read orphan inode 13 (err -117) [ 245.305521][ T6109] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 245.333682][ T6112] dlm: dev_write: no op 0 0 [ 245.697651][ T6126] befs: (nullb0): invalid magic header [ 246.738079][ T6136] befs: (nullb0): invalid magic header [ 247.963365][ T6145] kvm [6144]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1000011fc [ 248.023781][ T6152] device syzkaller0 entered promiscuous mode [ 248.040310][ T6145] kvm [6144]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 248.154969][ T6145] kvm [6144]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000e17f [ 248.243453][ T6145] kvm [6144]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 248.336671][ T6145] kvm [6144]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000b2fb [ 253.032746][ T5771] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 253.354355][ T6173] dlm: dev_write: no op 0 0 [ 253.385280][ T5771] Bluetooth: hci5: Injecting HCI hardware error event [ 253.403755][ T6188] 9pnet: Insufficient options for proto=fd [ 254.035835][ T6181] befs: (nullb0): invalid magic header [ 254.050724][ T4184] Bluetooth: hci5: hardware error 0x00 [ 254.250573][ T6198] befs: (nullb0): invalid magic header [ 255.050311][ T6200] netlink: 'syz.5.402': attribute type 13 has an invalid length. [ 255.121956][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.228632][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.277037][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.323323][ T4226] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 255.494982][ T6209] loop2: detected capacity change from 0 to 1024 [ 255.575378][ T4226] usb 7-1: Using ep0 maxpacket: 8 [ 255.853809][ T5771] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 255.858086][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869824][ T4226] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 255.883912][ T4226] usb 7-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.893472][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.897346][ T4226] usb 7-1: config 1 interface 0 has no altsetting 0 [ 256.223327][ T5771] usb 8-1: Using ep0 maxpacket: 8 [ 256.273884][ T4195] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 256.443499][ T4226] usb 7-1: string descriptor 0 read error: -22 [ 256.456984][ T4226] usb 7-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.40 [ 256.509272][ T4226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.175196][ T4226] hid (null): invalid report_size -1149171161 [ 257.341956][ T4226] wacom 0003:056A:0302.0003: invalid report_size -1149171161 [ 257.413088][ T4226] wacom 0003:056A:0302.0003: item 0 4 1 7 parsing failed [ 257.420919][ T4226] wacom 0003:056A:0302.0003: parse failed [ 257.433266][ T4226] wacom: probe of 0003:056A:0302.0003 failed with error -22 [ 257.483254][ T5771] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 257.503471][ T4226] usb 7-1: USB disconnect, device number 6 [ 257.933941][ T4224] Bluetooth: hci4: command 0x0406 tx timeout [ 258.214718][ T6247] capability: warning: `syz.5.410' uses 32-bit capabilities (legacy support in use) [ 258.382789][ T4323] hfsplus: b-tree write err: -5, ino 25 [ 258.389357][ T4323] hfsplus: b-tree write err: -5, ino 4 [ 258.397915][ T4323] hfsplus: b-tree write err: -5, ino 2 [ 258.406302][ T4323] hfsplus: b-tree write err: -5, ino 26 [ 258.958309][ T5771] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 258.968144][ T5771] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.976558][ T5771] usb 8-1: Product: syz [ 258.981250][ T5771] usb 8-1: Manufacturer: syz [ 258.986125][ T5771] usb 8-1: SerialNumber: syz [ 259.390235][ T5771] usb 8-1: can't set config #1, error -71 [ 259.411466][ T5771] usb 8-1: USB disconnect, device number 3 [ 259.433450][ T6262] loop2: detected capacity change from 0 to 256 [ 259.987939][ T6266] befs: (nullb0): invalid magic header [ 260.291692][ T6265] befs: (nullb0): invalid magic header [ 260.613866][ T6275] device syzkaller0 entered promiscuous mode [ 260.729717][ T6286] loop2: detected capacity change from 0 to 256 [ 260.785561][ T6276] netlink: 'syz.1.416': attribute type 13 has an invalid length. [ 260.824290][ T6284] loop6: detected capacity change from 0 to 1024 [ 260.927398][ T6286] FAT-fs (loop2): Directory bread(block 64) failed [ 260.946303][ T6286] FAT-fs (loop2): Directory bread(block 65) failed [ 260.953608][ T6286] FAT-fs (loop2): Directory bread(block 66) failed [ 260.961687][ T6286] FAT-fs (loop2): Directory bread(block 67) failed [ 260.968836][ T6286] FAT-fs (loop2): Directory bread(block 68) failed [ 260.976945][ T6286] FAT-fs (loop2): Directory bread(block 69) failed [ 260.995358][ T6286] FAT-fs (loop2): Directory bread(block 70) failed [ 261.002234][ T6286] FAT-fs (loop2): Directory bread(block 71) failed [ 261.172181][ T6286] FAT-fs (loop2): Directory bread(block 72) failed [ 261.311462][ T6286] FAT-fs (loop2): Directory bread(block 73) failed [ 261.728884][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.769027][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.876224][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.906305][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.935952][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.975492][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.839637][ T6301] loop5: detected capacity change from 0 to 256 [ 262.855421][ T6303] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 262.874518][ T4279] hfsplus: b-tree write err: -5, ino 25 [ 262.882032][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 262.889975][ T4279] hfsplus: b-tree write err: -5, ino 2 [ 262.899712][ T6301] FAT-fs (loop5): Unrecognized mount option "uni_xlate=mŒTCy*W" or missing value [ 262.907839][ T4279] hfsplus: b-tree write err: -5, ino 26 [ 263.254089][ T6316] befs: (nullb0): invalid magic header [ 264.370415][ T6337] befs: (nullb0): invalid magic header [ 267.854352][ T6386] Illegal XDP return value 4294967274, expect packet loss! [ 268.123828][ T6388] 9pnet: p9_fd_create_tcp (6388): problem connecting socket to 127.0.0.1 [ 268.179495][ T6390] binder: 6389:6390 ioctl c0306201 200000000080 returned -14 [ 268.224691][ T6390] netlink: 'syz.1.438': attribute type 12 has an invalid length. [ 268.417575][ T6394] loop6: detected capacity change from 0 to 512 [ 268.515813][ T6394] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #11: comm syz.6.439: unexpected EA_INODE flag [ 268.691875][ T6394] EXT4-fs (loop6): Remounting filesystem read-only [ 268.723323][ T6394] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.439: couldn't read orphan inode 11 (err -117) [ 268.787242][ T6394] EXT4-fs (loop6): Remounting filesystem read-only [ 268.800257][ T6408] befs: (nullb0): invalid magic header [ 269.094418][ T6394] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noload,nodelalloc,min_batch_time=0x0000000000000006,resgid=0x0000000000000000,acl,errors=remount-ro,. Quota mode: none. [ 269.897075][ T6418] loop1: detected capacity change from 0 to 256 [ 270.819704][ T6425] befs: (nullb0): invalid magic header [ 271.853517][ T5771] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 271.872439][ T6432] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 271.899462][ T6432] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 271.912309][ T6440] loop1: detected capacity change from 0 to 256 [ 271.994939][ T6440] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.046575][ T6440] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 272.065396][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 272.094422][ T6440] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 272.436721][ T5771] usb 6-1: unable to get BOS descriptor or descriptor too short [ 272.684462][ T5771] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 273.011864][ T4774] Bluetooth: hci2: Frame reassembly failed (-84) [ 273.364454][ T4279] Bluetooth: hci2: Frame reassembly failed (-84) [ 273.634250][ T5771] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 273.697156][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.832868][ T5771] usb 6-1: Product: syz [ 273.909840][ T5771] usb 6-1: Manufacturer: syz [ 273.992862][ T5771] usb 6-1: SerialNumber: syz [ 274.476173][ T5771] usb 6-1: selecting invalid altsetting 1 [ 274.562154][ T5771] usb 6-1: unit 3 not found! [ 274.687919][ T5771] usb 6-1: cannot request logical cluster ID: 35217 (err: -71) [ 274.874606][ T5771] usb 6-1: invalid MIXER UNIT descriptor 6 [ 275.047978][ T5771] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 275.099289][ T4225] Bluetooth: hci2: command 0x1003 tx timeout [ 275.128233][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 275.358131][ T5771] usb 6-1: selecting invalid altsetting 1 [ 275.366388][ T5771] usb 6-1: unit 3 not found! [ 275.404085][ T5771] usb 6-1: cannot request logical cluster ID: 35217 (err: -71) [ 275.564745][ T5771] usb 6-1: invalid MIXER UNIT descriptor 6 [ 275.579517][ T5771] snd-usb-audio: probe of 6-1:1.1 failed with error -71 [ 275.589500][ T5771] usb 6-1: selecting invalid altsetting 1 [ 275.595998][ T5771] usb 6-1: unit 3 not found! [ 275.725740][ T5771] usb 6-1: cannot request logical cluster ID: 35217 (err: -71) [ 275.807976][ T5771] usb 6-1: invalid MIXER UNIT descriptor 6 [ 276.376898][ T5771] snd-usb-audio: probe of 6-1:1.2 failed with error -71 [ 276.439057][ T6489] loop2: detected capacity change from 0 to 2048 [ 276.464168][ T5771] usb 6-1: USB disconnect, device number 6 [ 276.596869][ T6489] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.648213][ T26] audit: type=1804 audit(1774384869.792:3): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.458" name=2F6E6577726F6F742F3131342F66696C65302F02 dev="loop2" ino=18 res=1 errno=0 [ 276.783778][ T5205] udevd[5205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.188594][ T6520] device bridge1 entered promiscuous mode [ 277.229276][ T21] Bluetooth: hci2: command 0x1001 tx timeout [ 277.243047][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 277.283878][ T6521] loop5: detected capacity change from 0 to 512 [ 277.876665][ T6521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 277.963355][ T6521] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 279.477036][ T23] Bluetooth: hci2: command 0x1009 tx timeout [ 280.068284][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.7.470'. [ 280.583339][ T4226] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.956723][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.987883][ T4226] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.009431][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.074888][ T4226] usb 6-1: config 0 descriptor?? [ 281.497391][ T6568] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 281.522047][ T6568] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 281.564770][ T4226] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 281.611728][ T4226] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0004/input/input6 [ 281.860335][ T4226] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 282.133342][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 282.321206][ T6600] loop2: detected capacity change from 0 to 4096 [ 282.349110][ T6600] EXT4-fs (loop2): Ignoring removed nobh option [ 282.363804][ T6600] EXT4-fs (loop2): Test dummy encryption mode enabled [ 282.378872][ T6600] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,stripe=0x0000000000000002,nodiscard,noblock_validity,abort,,errors=continue. Quota mode: writeback. [ 282.404811][ T21] usb 6-1: USB disconnect, device number 7 [ 282.413434][ C0] keytouch 0003:0926:3333.0004: usb_submit_urb(ctrl) failed: -19 [ 282.423340][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 282.428950][ T5771] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 282.449842][ T5771] Bluetooth: hci1: Injecting HCI hardware error event [ 282.454428][ T6600] EXT4-fs error (device loop2): ext4_remount:6060: comm syz.2.479: Abort forced by user [ 282.457764][ T4195] Bluetooth: hci1: hardware error 0x00 [ 282.512577][ T6600] EXT4-fs (loop2): Remounting filesystem read-only [ 282.554795][ T6600] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 282.575283][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 282.593515][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 282.603736][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 282.623339][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 283.062491][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice= 0.40 [ 283.072453][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.081523][ T23] usb 2-1: Product: syz [ 283.085845][ T23] usb 2-1: Manufacturer: syz [ 283.090544][ T23] usb 2-1: SerialNumber: syz [ 283.123616][ T6579] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 283.133903][ T6613] binder: 6609:6613 ioctl 400c620e 2000000067c0 returned -22 [ 283.885918][ T23] usb 2-1: MIDIStreaming interface descriptor not found [ 284.172380][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -12 [ 284.210674][ T23] usb 2-1: USB disconnect, device number 5 [ 284.241646][ T5272] udevd[5272]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.739292][ T6608] loop2: detected capacity change from 0 to 40427 [ 284.936103][ T6622] loop6: detected capacity change from 0 to 40427 [ 285.763987][ T6660] loop7: detected capacity change from 0 to 256 [ 285.865295][ T6660] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.893536][ T6660] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 285.938399][ T6660] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 285.967905][ T6622] F2FS-fs (loop6): Found nat_bits in checkpoint [ 286.195718][ T6622] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 286.264566][ T6622] F2FS-fs (loop6): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 134217728, run fsck to fix. [ 286.365967][ T6622] F2FS-fs (loop6): Failed to read root inode [ 286.656664][ T6687] netlink: 'syz.5.497': attribute type 13 has an invalid length. [ 286.751354][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.772144][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.772300][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.639050][ T6727] loop2: detected capacity change from 0 to 256 [ 288.732121][ T6727] exfat: Deprecated parameter 'utf8' [ 288.789520][ T6727] exfat: Deprecated parameter 'utf8' [ 288.910466][ T6727] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 291.731309][ T6768] binder: 6764:6768 ioctl 400c620e 2000000067c0 returned -22 [ 294.497516][ T4224] Bluetooth: hci2: command 0x1003 tx timeout [ 294.521889][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 295.050886][ T6779] loop2: detected capacity change from 0 to 40427 [ 296.157259][ T6779] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 296.231251][ T6779] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 296.488572][ T6779] F2FS-fs (loop2): invalid crc value [ 296.755544][ T4259] Bluetooth: hci2: command 0x1001 tx timeout [ 296.761668][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 296.817725][ T6779] F2FS-fs (loop2): Wrong journal entry on segno 905969666 [ 296.850961][ T6779] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 297.705693][ T6833] loop5: detected capacity change from 0 to 256 [ 297.792941][ T6836] binder: 6830:6836 ioctl c0285840 200000000500 returned -22 [ 298.650002][ T6833] exfat: Deprecated parameter 'utf8' [ 298.658813][ T6833] exfat: Deprecated parameter 'utf8' [ 298.664850][ T6833] exfat: Deprecated parameter 'namecase' [ 298.762469][ T6843] befs: (nullb0): invalid magic header [ 299.145964][ T4228] Bluetooth: hci2: command 0x1009 tx timeout [ 299.185176][ T6841] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 299.206112][ T6833] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 302.468118][ T6887] device syzkaller0 entered promiscuous mode [ 303.978246][ T6894] loop2: detected capacity change from 0 to 512 [ 304.245242][ T6894] EXT4-fs (loop2): 1 truncate cleaned up [ 304.257384][ T6894] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 304.609691][ T6914] loop1: detected capacity change from 0 to 512 [ 304.682140][ T6914] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 304.808000][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'. [ 306.140698][ T4747] Bluetooth: hci2: Frame reassembly failed (-84) [ 307.885880][ T6951] device syzkaller0 entered promiscuous mode [ 308.205903][ T4228] Bluetooth: hci2: command 0x1003 tx timeout [ 308.473755][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 308.806130][ T6966] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 309.433313][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 309.753228][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 309.903523][ T23] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 309.953250][ T23] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 310.177989][ T23] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 310.211666][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.246403][ T23] usb 6-1: Product: syz [ 310.250771][ T23] usb 6-1: Manufacturer: syz [ 310.294380][ T23] usb 6-1: SerialNumber: syz [ 310.493351][ T4259] Bluetooth: hci2: command 0x1001 tx timeout [ 310.499544][ T4195] Bluetooth: hci2: sending frame failed (-49) [ 310.589866][ T6974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.633463][ T6974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.753552][ T6995] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 310.761723][ T6995] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 310.873422][ T23] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 310.927610][ T23] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 311.029534][ T23] usb 6-1: USB disconnect, device number 8 [ 311.080573][ T7004] loop7: detected capacity change from 0 to 512 [ 311.209579][ T7004] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 311.228913][ T7004] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.145893][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.226614][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.328635][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.354162][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.455416][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.487674][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.583321][ T4228] Bluetooth: hci2: command 0x1009 tx timeout [ 312.590137][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 312.671888][ T7029] befs: (nullb0): invalid magic header [ 313.123690][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 313.142964][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 313.161176][ T5622] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 313.663926][ T7036] befs: (nullb0): invalid magic header [ 314.717463][ T4228] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 315.013326][ T4228] usb 6-1: Using ep0 maxpacket: 8 [ 315.218068][ T4228] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.323507][ T4228] usb 6-1: config 1 interface 0 has no altsetting 0 [ 315.503746][ T4228] usb 6-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 315.512932][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.582643][ T4228] usb 6-1: Product: syz [ 315.602961][ T4228] usb 6-1: Manufacturer: syz [ 315.636344][ T4228] usb 6-1: SerialNumber: syz [ 316.151138][ T7044] loop5: detected capacity change from 0 to 256 [ 316.289781][ T7068] loop6: detected capacity change from 0 to 256 [ 316.427667][ T7068] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.509870][ T4228] usbhid 6-1:1.0: can't add hid device: -71 [ 316.516056][ T4228] usbhid: probe of 6-1:1.0 failed with error -71 [ 316.543350][ T26] audit: type=1800 audit(1774384909.682:4): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.565" name="file1" dev="loop6" ino=1048652 res=0 errno=0 [ 316.613084][ T4228] usb 6-1: USB disconnect, device number 9 [ 316.618514][ T26] audit: type=1800 audit(1774384909.732:5): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.565" name="file1" dev="loop6" ino=1048652 res=0 errno=0 [ 316.774248][ T7072] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 316.797345][ T7072] FAT-fs (loop6): Filesystem has been set read-only [ 316.847816][ T4606] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.002551][ T4606] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.132528][ T4606] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.190451][ T7080] loop5: detected capacity change from 0 to 1024 [ 317.249625][ T4606] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.283886][ T7083] loop6: detected capacity change from 0 to 512 [ 317.296335][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.302766][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.353408][ T7080] EXT4-fs (loop5): Unrecognized mount option "fscontext=user_u" or missing value [ 317.401630][ T7083] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 317.449253][ T7087] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 317.557034][ T7083] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #11: comm syz.6.570: iget: bad extended attribute block 3153 [ 317.710872][ T7083] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.570: couldn't read orphan inode 11 (err -117) [ 317.765085][ T7083] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 318.747252][ T4854] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /58/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 318.863659][ T4854] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 3153 [ 319.063894][ T4854] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 3153 [ 319.554154][ T4259] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 320.221012][ T7127] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 320.293397][ T4259] usb 6-1: Using ep0 maxpacket: 16 [ 320.411437][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 320.413485][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.430845][ T4259] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 320.452939][ T4259] usb 6-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 320.467634][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.478493][ T4259] usb 6-1: config 0 descriptor?? [ 320.639137][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.718563][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.742875][ T7110] device bridge_slave_0 entered promiscuous mode [ 320.800011][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.818439][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.838769][ T7110] device bridge_slave_1 entered promiscuous mode [ 320.893269][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 320.952803][ T7114] udc-core: couldn't find an available UDC or it's busy [ 320.963681][ T7114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.996108][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.029175][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.038707][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.055937][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.078811][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.105006][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.122382][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.133520][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.150833][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.154389][ T7152] loop1: detected capacity change from 0 to 256 [ 321.168400][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.183314][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.200406][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x2 [ 321.217907][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.233275][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.240287][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.253466][ T7152] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 321.273279][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x2 [ 321.282235][ T4259] wacom 0003:056A:0059.0005: unknown main item tag 0x0 [ 321.334122][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.345633][ T7152] exFAT-fs (loop1): error, invalid size(size(0) > aligned(9223372036854777344) [ 321.345633][ T7152] [ 321.360984][ T4259] wacom 0003:056A:0059.0005: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.5-1/input0 [ 321.389358][ T4259] usb 6-1: USB disconnect, device number 10 [ 321.443983][ T7152] exFAT-fs (loop1): Filesystem has been set read-only [ 321.510063][ T4606] device hsr_slave_0 left promiscuous mode [ 321.553912][ T4606] device hsr_slave_1 left promiscuous mode [ 321.560468][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.579162][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.635060][ T26] audit: type=1326 audit(1774384914.782:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55a3bc8799 code=0x0 [ 321.668421][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.689625][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.692633][ T7156] fido_id[7156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 321.712668][ T4606] device bridge_slave_1 left promiscuous mode [ 321.730128][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.756056][ T4606] device bridge_slave_0 left promiscuous mode [ 321.779523][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.804495][ T4606] device veth1_macvtap left promiscuous mode [ 321.820440][ T4606] device veth0_macvtap left promiscuous mode [ 321.832429][ T4606] device veth1_vlan left promiscuous mode [ 321.845519][ T4606] device veth0_vlan left promiscuous mode [ 322.434459][ T4606] team0 (unregistering): Port device team_slave_1 removed [ 322.492123][ T4606] team0 (unregistering): Port device team_slave_0 removed [ 322.542262][ T4606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.592381][ T4606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.680775][ T7139] loop2: detected capacity change from 0 to 131072 [ 322.747212][ T7139] F2FS-fs (loop2): invalid crc value [ 322.828892][ T7139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 322.895083][ T4606] bond0 (unregistering): Released all slaves [ 322.952648][ T7139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 322.983596][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 323.169266][ T7110] team0: Port device team_slave_0 added [ 323.178302][ T7203] loop5: detected capacity change from 0 to 1024 [ 323.277980][ T7110] team0: Port device team_slave_1 added [ 323.296238][ T7203] EXT4-fs (loop5): Ignoring removed orlov option [ 323.365473][ T7203] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.472245][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 323.494712][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.501817][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.578045][ T7203] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 323.611942][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.632285][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.660173][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.730425][ T7201] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 323.827050][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.021392][ T7110] device hsr_slave_0 entered promiscuous mode [ 324.156079][ T7110] device hsr_slave_1 entered promiscuous mode [ 324.186520][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.208959][ T7110] Cannot create hsr debugfs directory [ 324.246460][ T7223] netlink: 'syz.5.589': attribute type 1 has an invalid length. [ 324.467068][ T7225] bond1: (slave gretap1): making interface the new active one [ 324.506074][ T7225] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 324.563088][ T7228] device macvlan2 entered promiscuous mode [ 324.594589][ T7228] device bond1 entered promiscuous mode [ 324.611767][ T7228] device gretap1 entered promiscuous mode [ 324.632920][ T7228] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.646685][ T7228] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 324.699776][ T7231] loop2: detected capacity change from 0 to 512 [ 324.715825][ T7228] device bond1 left promiscuous mode [ 324.721264][ T7228] device gretap1 left promiscuous mode [ 324.759092][ T7231] EXT4-fs (loop2): Ignoring removed bh option [ 324.780588][ T7231] EXT4-fs (loop2): Test dummy encryption mode enabled [ 324.791032][ T26] audit: type=1326 audit(1774385173.936:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.1.591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55a3bc8799 code=0x0 [ 324.821795][ T7153] chnl_net:caif_netlink_parms(): no params data found [ 324.830628][ T7231] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.588: inode has both inline data and extents flags [ 324.845872][ T7231] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.588: couldn't read orphan inode 15 (err -117) [ 324.868797][ T7231] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,bh,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 325.053319][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 325.103855][ T7231] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 325.139840][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.177989][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.213373][ T7153] device bridge_slave_0 entered promiscuous mode [ 325.287992][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.311595][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.320729][ T7153] device bridge_slave_1 entered promiscuous mode [ 325.330414][ T7110] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 325.386457][ T7110] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 325.409316][ T7225] syz.5.589 (7225) used greatest stack depth: 18128 bytes left [ 325.445460][ T7110] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 325.533500][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 325.550469][ T7153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.569494][ T7110] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 325.602565][ T7153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.706566][ T7272] loop1: detected capacity change from 0 to 512 [ 325.740094][ T7153] team0: Port device team_slave_0 added [ 325.785698][ T7153] team0: Port device team_slave_1 added [ 325.820061][ T7272] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.594: bg 0: block 473: padding at end of block bitmap is not set [ 325.843351][ T21] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 325.856780][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.865364][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.897589][ T7153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.936901][ T7272] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 325.965470][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.980371][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.993801][ T7272] EXT4-fs (loop1): 1 orphan inode deleted [ 326.015075][ T7153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.063047][ T7272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.106602][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.190202][ T7272] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.206539][ T7153] device hsr_slave_0 entered promiscuous mode [ 326.230938][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 326.247667][ T7153] device hsr_slave_1 entered promiscuous mode [ 326.285256][ T7153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.903754][ T21] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.114732][ T4203] Bluetooth: hci1: command 0x0419 tx timeout [ 328.121564][ T4203] Bluetooth: hci2: command 0x040f tx timeout [ 328.129189][ T7153] Cannot create hsr debugfs directory [ 328.136982][ T21] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.147687][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.186418][ T7110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.201169][ T7110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.234356][ T21] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 328.249106][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 328.256317][ T21] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 328.269431][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.308443][ T21] usb 6-1: config 0 descriptor?? [ 328.316024][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.367956][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.430518][ T7295] loop1: detected capacity change from 0 to 512 [ 328.448239][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.487516][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.521676][ T7295] EXT4-fs (loop1): Test dummy encryption mode enabled [ 328.712628][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.720165][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.732083][ T7295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.773494][ T21] usbhid 6-1:0.0: can't add hid device: -71 [ 328.872719][ T21] usbhid: probe of 6-1:0.0 failed with error -71 [ 328.873033][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.912574][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.948222][ T21] usb 6-1: USB disconnect, device number 11 [ 329.024463][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.031894][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.047150][ T7295] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.597: bad orphan inode 131083 [ 329.068990][ T7295] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,sb=0x0000000000000002,test_dummy_encryption,noinit_itable,,errors=continue. Quota mode: none. [ 329.161796][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.191099][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.224770][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.234114][ T7309] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 329.271352][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.278519][ T7295] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 329.334226][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.382165][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.418341][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.436803][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.465465][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.538287][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.578813][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.620151][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.661136][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.715667][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 331.054813][ T7153] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 331.088432][ T7153] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 331.133790][ T7153] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 331.176796][ T7153] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 331.216575][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.245101][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.259392][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.688623][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.800017][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.822042][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.887854][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.952373][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.044432][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.053090][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.060553][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.122319][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.144242][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.174340][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.201162][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.208541][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.338538][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.395890][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.466146][ T7381] binder: 7377:7381 ioctl 400c620e 2000000067c0 returned -22 [ 332.490674][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.995731][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.507427][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.563972][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.594345][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.602572][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.646129][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.680064][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.718470][ T7397] loop1: detected capacity change from 0 to 512 [ 333.730033][ T7110] device veth0_vlan entered promiscuous mode [ 333.748595][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.778591][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.798979][ T7397] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=a842c018, mo2=0000] [ 333.814419][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.823579][ T7397] System zones: 0-1, 18-18, 34-34, 40-40 [ 333.830436][ T7397] EXT4-fs (loop1): orphan cleanup on readonly fs [ 333.885614][ T7110] device veth1_vlan entered promiscuous mode [ 333.894445][ T7397] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 333.935501][ T7153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.960390][ T7397] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 333.983403][ T7153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.023324][ T7397] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.611: Failed to acquire dquot type 0 [ 334.035514][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.055082][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.074088][ T7397] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 334.085091][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.105154][ T7397] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 334.112863][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.133292][ T7397] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.611: Failed to acquire dquot type 0 [ 334.145300][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.194754][ T7397] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.611: bg 0: block 64: padding at end of block bitmap is not set [ 334.250732][ T4606] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.287546][ T7397] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 334.312379][ T7110] device veth0_macvtap entered promiscuous mode [ 334.320103][ T7397] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 334.336662][ T7397] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 334.336732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.349941][ T7397] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.611: Failed to acquire dquot type 0 [ 334.368157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.377451][ T7397] EXT4-fs (loop1): 1 orphan inode deleted [ 334.389456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.398845][ T7397] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nolazytime,,errors=continue. Quota mode: writeback. [ 334.455984][ T7110] device veth1_macvtap entered promiscuous mode [ 334.512103][ T4606] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.588437][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.643209][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.668619][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.718705][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.751679][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.782650][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.822536][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.869319][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.884502][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.919987][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.958383][ T4606] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.019883][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.057258][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.081118][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.122975][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.153552][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.174147][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.197995][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.245636][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.267550][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.280187][ T7110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.323290][ T7110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.452126][ T7437] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 335.460800][ T7110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.501432][ T7110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.552005][ T7441] befs: (nullb0): invalid magic header [ 336.254299][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.254526][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.100930][ T4606] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.131310][ T7449] loop5: detected capacity change from 0 to 256 [ 337.791930][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.847478][ T7449] FAT-fs (loop5): Unrecognized mount option "coderage=932" or missing value [ 338.976678][ T4760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.007154][ T4760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.169549][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.271403][ T7468] befs: (nullb0): invalid magic header [ 339.997348][ T4760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.040850][ T7473] loop5: detected capacity change from 0 to 256 [ 340.047493][ T4760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.091613][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.327592][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.622'. [ 340.538356][ T7496] befs: (nullb0): invalid magic header [ 341.628114][ T7499] befs: (nullb0): invalid magic header [ 341.779214][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.814165][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.855158][ T7508] loop8: detected capacity change from 0 to 512 [ 341.917111][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.941742][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.101334][ T7508] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.628: iget: bad i_size value: 38620345925642 [ 342.273891][ T7508] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.628: couldn't read orphan inode 15 (err -117) [ 342.389075][ T7508] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.866167][ T7153] device veth0_vlan entered promiscuous mode [ 342.887847][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.975103][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.990750][ T26] audit: type=1326 audit(1774385192.136:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.069289][ T26] audit: type=1326 audit(1774385192.166:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.260565][ T26] audit: type=1326 audit(1774385192.186:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.309977][ T7153] device veth1_vlan entered promiscuous mode [ 343.366341][ T26] audit: type=1326 audit(1774385192.186:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.462565][ T26] audit: type=1326 audit(1774385192.186:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.524228][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.549606][ T26] audit: type=1326 audit(1774385192.186:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.578285][ T26] audit: type=1326 audit(1774385192.186:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.609745][ T26] audit: type=1326 audit(1774385192.246:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.644875][ T26] audit: type=1326 audit(1774385192.246:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.677299][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.696437][ T26] audit: type=1326 audit(1774385192.246:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fa4eac799 code=0x7ffc0000 [ 343.730452][ T7549] loop1: detected capacity change from 0 to 8192 [ 343.740347][ T7153] device veth0_macvtap entered promiscuous mode [ 343.780929][ T7153] device veth1_macvtap entered promiscuous mode [ 343.825377][ T7560] befs: (nullb0): invalid magic header [ 343.898808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.117984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.552013][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.679161][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.857133][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.015550][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.191780][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.386011][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.491022][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.501789][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.514004][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.526452][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.624927][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.650390][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.692774][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.733270][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.783201][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.823281][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.858557][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.899243][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.939497][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.987110][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.043680][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.052840][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.112488][ T7153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.142514][ T7153] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.190223][ T7153] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.241756][ T7153] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.557764][ T7607] device syzkaller0 entered promiscuous mode [ 346.634818][ T7580] loop5: detected capacity change from 0 to 40427 [ 346.690983][ T7580] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 346.718933][ T7580] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 346.780539][ T7580] F2FS-fs (loop5): invalid crc value [ 346.790381][ T7580] F2FS-fs (loop5): Found nat_bits in checkpoint [ 346.803558][ T4780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.823178][ T4780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.903699][ T7616] befs: (nullb0): invalid magic header [ 347.376029][ T7580] F2FS-fs (loop5): Start checkpoint disabled! [ 347.454761][ T7580] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 347.517271][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.594967][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.631797][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.676397][ T4606] device hsr_slave_0 left promiscuous mode [ 347.705349][ T4606] device hsr_slave_1 left promiscuous mode [ 347.729631][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.797021][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.850129][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.860897][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.896577][ T4606] device bridge_slave_1 left promiscuous mode [ 347.918122][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.948515][ T4606] device bridge_slave_0 left promiscuous mode [ 347.968475][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.039089][ T4606] device veth1_macvtap left promiscuous mode [ 348.068911][ T4606] device veth0_macvtap left promiscuous mode [ 348.076070][ T4606] device veth1_vlan left promiscuous mode [ 348.082106][ T4606] device veth0_vlan left promiscuous mode [ 349.375425][ T4606] team0 (unregistering): Port device team_slave_1 removed [ 349.397701][ T4606] team0 (unregistering): Port device team_slave_0 removed [ 349.425621][ T4606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.446665][ T4606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.532011][ T4606] bond0 (unregistering): Released all slaves [ 349.603549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.872720][ T7664] loop2: detected capacity change from 0 to 256 [ 349.886290][ T7667] loop9: detected capacity change from 0 to 256 [ 350.060126][ T7667] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 350.093682][ T7664] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 350.158521][ T7671] device syzkaller0 entered promiscuous mode [ 350.271020][ T7664] attempt to access beyond end of device [ 350.271020][ T7664] loop2: rw=524288, want=4281, limit=256 [ 350.344433][ T7664] attempt to access beyond end of device [ 350.344433][ T7664] loop2: rw=0, want=4281, limit=256 [ 350.461816][ T7681] loop8: detected capacity change from 0 to 4096 [ 350.511226][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 350.511262][ T26] audit: type=1800 audit(1774385199.586:37): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.658" name="file1" dev="loop2" ino=1048660 res=0 errno=0 [ 351.255073][ T7681] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 352.223885][ T4224] kernel write not supported for file /vcs (pid: 4224 comm: kworker/0:4) [ 352.322971][ T7708] device syzkaller0 entered promiscuous mode [ 352.447887][ T7715] loop8: detected capacity change from 0 to 1024 [ 352.505371][ T7715] EXT4-fs (loop8): Ignoring removed bh option [ 352.601188][ T7715] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 352.672949][ T7725] device syzkaller0 entered promiscuous mode [ 352.835375][ T7715] overlayfs: upper fs does not support tmpfile. [ 356.198206][ T7774] befs: (nullb0): invalid magic header [ 356.271164][ T7775] loop9: detected capacity change from 0 to 256 [ 356.563327][ T4259] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 359.824457][ T4330] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 360.085392][ T4330] usb 9-1: Using ep0 maxpacket: 32 [ 360.203657][ T4330] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 360.222131][ T4330] usb 9-1: config 0 has no interface number 0 [ 360.443688][ T4330] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 360.485497][ T4330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.523314][ T4259] usb 2-1: device not accepting address 6, error -71 [ 360.668292][ T4330] usb 9-1: Product: syz [ 360.751170][ T4330] usb 9-1: Manufacturer: syz [ 360.834616][ T4330] usb 9-1: SerialNumber: syz [ 361.016077][ T4330] usb 9-1: config 0 descriptor?? [ 361.165075][ T4330] smsc95xx v2.0.0 [ 361.633376][ T4259] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 361.697428][ T4330] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 361.709346][ T4330] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 361.833243][ T7849] befs: (nullb0): invalid magic header [ 362.707908][ T4330] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 362.733480][ T4330] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 362.781920][ T4330] usb 9-1: USB disconnect, device number 2 [ 362.857425][ T4259] usb 2-1: device not accepting address 7, error -71 [ 362.871134][ T4259] usb usb2-port1: attempt power cycle [ 362.887021][ T7843] befs: (nullb0): invalid magic header [ 366.838980][ T7886] befs: (nullb0): invalid magic header [ 367.148789][ T7903] loop1: detected capacity change from 0 to 512 [ 367.205642][ T7903] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.714: missing EA_INODE flag [ 367.284119][ T7903] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.714: error while reading EA inode 12 err=-117 [ 367.459213][ T7903] EXT4-fs (loop1): 1 orphan inode deleted [ 367.491607][ T7903] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 371.236242][ T7963] loop2: detected capacity change from 0 to 512 [ 371.691470][ T7979] befs: (nullb0): invalid magic header [ 371.805676][ T7977] binder: 7966:7977 ioctl 400c620e 2000000067c0 returned -22 [ 372.952182][ T7963] EXT4-fs (loop2): 1 truncate cleaned up [ 372.982444][ T7963] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 373.074663][ T7963] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 1633771873 (only 1 groups) [ 376.582751][ T8048] mkiss: ax0: crc mode is auto. [ 376.674617][ T8050] binder: 8043:8050 ioctl 400c620e 2000000067c0 returned -22 [ 381.857223][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.863634][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.203431][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 384.635575][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.793230][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.826946][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.913329][ T21] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 385.922577][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.006838][ T8094] dlm: dev_write: no op 0 0 [ 386.050622][ T21] usb 2-1: config 0 descriptor?? [ 386.400649][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.757'. [ 386.425031][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 386.434809][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 386.489919][ T21] usb 2-1: USB disconnect, device number 9 [ 387.423310][ T8121] mkiss: ax0: crc mode is auto. [ 389.123337][ T8132] befs: (nullb0): invalid magic header [ 390.082750][ T8138] binder: 8134:8138 ioctl 400c620e 2000000067c0 returned -22 [ 391.493302][ T4224] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 391.548476][ T4259] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 392.433269][ T4224] usb 9-1: Using ep0 maxpacket: 8 [ 392.553521][ T4224] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 392.673615][ T4259] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.705311][ T4259] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.733490][ T4259] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.762522][ T4259] usb 10-1: config 0 interface 0 has no altsetting 0 [ 392.790693][ T4259] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 392.821949][ T4259] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.843521][ T4224] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 392.871922][ T4224] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.894326][ T4259] usb 10-1: config 0 descriptor?? [ 392.904807][ T4224] usb 9-1: Product: syz [ 392.909437][ T4224] usb 9-1: Manufacturer: syz [ 392.917188][ T4224] usb 9-1: SerialNumber: syz [ 393.623573][ T8189] befs: (nullb0): invalid magic header [ 393.727013][ T4259] holtek 0003:1241:5015.0006: bogus close delimiter [ 393.745599][ T4259] holtek 0003:1241:5015.0006: item 0 0 2 10 parsing failed [ 393.778074][ T4259] holtek 0003:1241:5015.0006: parse failed [ 393.784684][ T4259] holtek: probe of 0003:1241:5015.0006 failed with error -22 [ 393.967345][ T4259] usb 10-1: USB disconnect, device number 2 [ 395.013673][ T8207] mkiss: ax0: crc mode is auto. [ 395.026911][ T4224] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 395.057414][ T8209] loop2: detected capacity change from 0 to 1024 [ 395.081589][ T8211] binder: 8203:8211 ioctl 400c620e 2000000067c0 returned -22 [ 395.231517][ T8209] EXT4-fs (loop2): invalid first ino: 8 [ 395.641841][ T4224] usb 9-1: USB disconnect, device number 3 [ 397.353380][ T21] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 397.792024][ T8259] mkiss: ax0: crc mode is auto. [ 397.843579][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.866882][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26623, setting to 1024 [ 397.882445][ T8261] loop9: detected capacity change from 0 to 512 [ 397.902201][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.929040][ T21] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.949440][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.007553][ T21] usb 6-1: config 0 descriptor?? [ 398.033718][ T8235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 398.063665][ T8261] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.790: invalid indirect mapped block 4294967295 (level 0) [ 398.084563][ T8274] dlm: dev_write: no op 0 0 [ 398.110625][ T8261] EXT4-fs (loop9): Remounting filesystem read-only [ 398.118457][ T8261] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.790: invalid indirect mapped block 4294967295 (level 1) [ 398.138304][ T8261] EXT4-fs (loop9): Remounting filesystem read-only [ 398.147128][ T8261] EXT4-fs (loop9): 1 orphan inode deleted [ 398.152894][ T8261] EXT4-fs (loop9): 1 truncate cleaned up [ 398.163042][ T8261] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,data_err=abort,block_validity,block_validity,errors=remount-ro,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 398.535061][ T21] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 399.034809][ T21] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 399.117839][ T21] usb 6-1: USB disconnect, device number 12 [ 399.490961][ T8291] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 399.547624][ T8291] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 399.709500][ T8304] fido_id[8304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 402.331148][ T8339] dlm: dev_write: no op 0 0 [ 402.686411][ T8345] mkiss: ax0: crc mode is auto. [ 403.125064][ T8342] netlink: 'syz.5.809': attribute type 1 has an invalid length. [ 403.449912][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.809'. [ 404.204621][ T8366] loop1: detected capacity change from 0 to 8192 [ 405.131350][ T8394] overlayfs: upper fs does not support file handles, falling back to index=off. [ 405.478769][ T8412] mkiss: ax0: crc mode is auto. [ 407.328890][ T8414] dlm: dev_write: no op 0 0 [ 407.334293][ T8415] binder: 8405:8415 ioctl c0285840 200000000500 returned -22 [ 408.190823][ T8424] netlink: 'syz.9.827': attribute type 1 has an invalid length. [ 408.274821][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.9.827'. [ 408.318321][ T8430] binder: BINDER_SET_CONTEXT_MGR already set [ 408.339481][ T8424] bond1: (slave gretap1): making interface the new active one [ 408.350163][ T8424] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 408.368132][ T8430] binder: 8427:8430 ioctl 4018620d 200000000040 returned -16 [ 408.419162][ T8424] device macvlan2 entered promiscuous mode [ 408.426973][ T8424] device bond1 entered promiscuous mode [ 408.432773][ T8424] device gretap1 entered promiscuous mode [ 408.469264][ T8424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 408.518925][ T8424] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 408.539041][ T8425] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 408.562920][ T8425] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 408.649626][ T8424] device bond1 left promiscuous mode [ 408.668161][ T8424] device gretap1 left promiscuous mode [ 410.084066][ T8478] mkiss: ax0: crc mode is auto. [ 411.949164][ T8484] dlm: dev_write: no op 0 0 [ 411.954441][ T8495] binder: 8483:8495 ioctl c0285840 200000000500 returned -22 [ 413.076404][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.8.847'. [ 413.383692][ T8505] loop1: detected capacity change from 0 to 8192 [ 413.686443][ T8525] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 413.733644][ T8525] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 414.317967][ T8538] befs: (nullb0): invalid magic header [ 415.006391][ T8552] dlm: dev_write: no op 0 0 [ 415.353703][ T4225] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 415.813463][ T4225] usb 10-1: Using ep0 maxpacket: 16 [ 415.933312][ T4224] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 415.951905][ T8567] binder: 8560:8567 ioctl c0285840 200000000500 returned -22 [ 415.967871][ T4225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.989650][ T4225] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.025093][ T4225] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.052899][ T8573] loop8: detected capacity change from 0 to 256 [ 416.075609][ T4225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.090250][ T8572] loop1: detected capacity change from 0 to 512 [ 416.109441][ T4225] usb 10-1: config 0 descriptor?? [ 416.138271][ T8573] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 416.162050][ T8572] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 416.183343][ T4224] usb 3-1: Using ep0 maxpacket: 8 [ 416.212793][ T8572] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,nogrpid,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 416.242227][ T8572] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.271939][ T8573] exFAT-fs (loop8): error, invalid size(size(22539) > aligned(9223372036854777344) [ 416.271939][ T8573] [ 416.340906][ T8573] exFAT-fs (loop8): Filesystem has been set read-only [ 416.350744][ T4224] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.446626][ T4224] usb 3-1: config 1 interface 0 has no altsetting 0 [ 417.321225][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 417.331288][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 417.347314][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 417.364422][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.133660][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.153414][ T4224] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 418.186518][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.224329][ T4224] usb 3-1: Product: syz [ 418.232778][ T4224] usb 3-1: Manufacturer: syz [ 418.273467][ T4224] usb 3-1: can't set config #1, error -71 [ 418.297227][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.305173][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.313311][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.320680][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.324103][ T4224] usb 3-1: USB disconnect, device number 8 [ 418.328389][ T4225] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 418.352446][ T4225] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0008/input/input10 [ 418.782255][ T4225] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 419.106540][ T4225] usb 10-1: USB disconnect, device number 3 [ 419.328680][ T8620] dlm: dev_write: no op 0 0 [ 420.069162][ T8621] befs: (nullb0): invalid magic header [ 420.186263][ T8622] fido_id[8622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 422.068750][ T8644] binder: 8637:8644 ioctl c0285840 200000000500 returned -22 [ 422.243738][ T8655] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 422.320977][ T8648] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 422.436767][ T8648] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 422.546967][ T8674] befs: (nullb0): invalid magic header [ 423.182325][ T8670] dlm: dev_write: no op 0 0 [ 423.250662][ T8681] loop9: detected capacity change from 0 to 128 [ 423.443972][ T8681] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 424.367151][ T8681] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 424.768172][ T4774] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 425.220860][ T8715] binder: 8710:8715 ioctl c0285840 200000000500 returned -22 [ 425.340597][ T8719] binder: 8718:8719 ioctl 4018620d 0 returned -22 [ 426.024319][ T8735] befs: (nullb0): invalid magic header [ 426.824339][ T8732] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 426.853452][ T8732] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 427.071488][ T8753] dlm: dev_write: no op 0 0 [ 427.208917][ T8756] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 428.854462][ T8777] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 428.908770][ T8777] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 429.110362][ T8790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 429.767517][ T8797] binder: 8792:8797 ioctl c0285840 200000000500 returned -22 [ 430.260928][ T8790] loop9: detected capacity change from 0 to 131072 [ 430.378450][ T8790] F2FS-fs (loop9): Test dummy encryption mode enabled [ 430.391097][ T8790] F2FS-fs (loop9): invalid crc value [ 430.422861][ T8790] F2FS-fs (loop9): Found nat_bits in checkpoint [ 430.461760][ T8790] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 430.828444][ T8807] loop8: detected capacity change from 0 to 8192 [ 431.350870][ T8788] loop2: detected capacity change from 0 to 40427 [ 431.454444][ T8788] F2FS-fs (loop2): invalid crc value [ 431.504201][ T8788] F2FS-fs (loop2): Found nat_bits in checkpoint [ 432.347487][ T7110] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 432.404627][ T8788] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 432.421491][ T7110] FAT-fs (loop8): Filesystem has been set read-only [ 434.234743][ T4767] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.021674][ T8864] dlm: dev_write: no op 0 0 [ 435.137118][ T4767] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.259445][ T4767] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.342131][ T8872] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 435.409145][ T8876] loop2: detected capacity change from 0 to 16 [ 435.451103][ T4767] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.504498][ T8876] erofs: Unknown parameter 'net/arp' [ 436.521788][ T8899] loop2: detected capacity change from 0 to 1024 [ 436.634395][ T8883] chnl_net:caif_netlink_parms(): no params data found [ 436.657294][ T8899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 436.821845][ T8906] loop5: detected capacity change from 0 to 512 [ 436.899827][ T8906] EXT4-fs (loop5): Ignoring removed orlov option [ 437.066693][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.074882][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.092727][ T8883] device bridge_slave_0 entered promiscuous mode [ 437.102196][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.109961][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.118703][ T8883] device bridge_slave_1 entered promiscuous mode [ 437.474876][ T8906] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 437.513305][ T26] audit: type=1800 audit(1774385286.631:38): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.923" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 437.533929][ T8906] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.654947][ T8883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.675715][ T8883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.804584][ T8883] team0: Port device team_slave_0 added [ 437.941529][ T8883] team0: Port device team_slave_1 added [ 438.013477][ T4203] Bluetooth: hci1: command 0x0409 tx timeout [ 438.045339][ T8906] ipt_CLUSTERIP: Please specify destination IP [ 438.062681][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.082420][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.773724][ T8883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.844161][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.867388][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.950368][ T8934] loop2: detected capacity change from 0 to 1024 [ 438.997574][ T8883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.034249][ T8934] EXT4-fs (loop2): Ignoring removed bh option [ 439.073987][ T8934] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 439.073987][ T8934] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 439.073987][ T8934] [ 439.143471][ T8934] EXT4-fs (loop2): Unrecognized mount option "smackfshat={" or missing value [ 439.300397][ T8943] loop1: detected capacity change from 0 to 256 [ 439.381773][ T8943] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.440223][ T26] audit: type=1800 audit(1774385288.581:39): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.928" name="file1" dev="loop1" ino=1048680 res=0 errno=0 [ 439.473046][ T8943] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 439.493338][ T8943] FAT-fs (loop1): Filesystem has been set read-only [ 439.720665][ T8948] loop9: detected capacity change from 0 to 1024 [ 439.772331][ T8948] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.811052][ T8948] EXT4-fs (loop9): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,delalloc,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x0000000000000005,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 439.908363][ T8948] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 439.951433][ T8948] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 440.093364][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 440.497899][ T8883] device hsr_slave_0 entered promiscuous mode [ 440.534354][ T8883] device hsr_slave_1 entered promiscuous mode [ 440.559720][ T8883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.587959][ T8883] Cannot create hsr debugfs directory [ 442.020755][ T4767] device hsr_slave_0 left promiscuous mode [ 442.030626][ T4767] device hsr_slave_1 left promiscuous mode [ 442.068600][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.110592][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.149438][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.173290][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 442.204599][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.284093][ T4767] device bridge_slave_1 left promiscuous mode [ 442.330506][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.405126][ T4767] device bridge_slave_0 left promiscuous mode [ 442.448510][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.526606][ T4767] device veth1_macvtap left promiscuous mode [ 442.583348][ T4767] device veth0_macvtap left promiscuous mode [ 442.589462][ T4767] device veth1_vlan left promiscuous mode [ 442.644540][ T4767] device veth0_vlan left promiscuous mode [ 443.366792][ T8992] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 443.539084][ T4767] team0 (unregistering): Port device team_slave_1 removed [ 443.640400][ T4767] team0 (unregistering): Port device team_slave_0 removed [ 443.688855][ T4767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.778723][ T4767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.105343][ T4767] bond0 (unregistering): Released all slaves [ 444.253383][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 444.905421][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 445.158682][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 445.303629][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.310302][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.333357][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 445.413347][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 445.583511][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.622186][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.645955][ T7] usb 3-1: Product: syz [ 445.656218][ T7] usb 3-1: Manufacturer: syz [ 445.660886][ T7] usb 3-1: SerialNumber: syz [ 445.800257][ T9024] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.941' sets config #17161 [ 445.960731][ T9000] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 446.864708][ T9038] input: syz1 as /devices/virtual/input/input11 [ 447.024344][ T8883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.073926][ T8883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.122082][ T8883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.133339][ T7] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 447.173512][ T7] cdc_ncm 3-1:1.0: bind() failure [ 447.182787][ T7] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 447.206041][ T7] cdc_ncm 3-1:1.1: bind() failure [ 447.246887][ T7] usb 3-1: USB disconnect, device number 9 [ 447.366833][ T8883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 447.385204][ T9026] Bluetooth: hci2: command 0x0406 tx timeout [ 447.775022][ T8883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.833782][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.875880][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.903450][ T9058] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 447.936115][ T8883] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.955357][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.029847][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.109976][ T9072] loop2: detected capacity change from 0 to 256 [ 448.123895][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.131111][ T4762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.253729][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.316331][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.379549][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.435901][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.443109][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.503341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 448.514046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.567501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 448.613766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.655360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.714101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 448.752310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.782945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 448.823927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.854041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.883747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.943326][ T9027] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 449.333500][ T9027] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 449.342675][ T9027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.386896][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.408989][ T9027] usb 3-1: config 0 descriptor?? [ 449.428171][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.441432][ T9090] loop5: detected capacity change from 0 to 4096 [ 449.486678][ T8883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.548573][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.558365][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.631106][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.660153][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.699873][ T9090] EXT4-fs (loop5): inline encryption not supported [ 449.713345][ T9090] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 449.713345][ T9090] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 449.713345][ T9090] [ 450.463085][ T8883] device veth0_vlan entered promiscuous mode [ 450.474080][ T9090] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a8428018, mo2=0003] [ 450.482661][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.533480][ T9090] System zones: 0-5 [ 450.548862][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.556725][ T9090] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,nouser_xattr,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 450.601102][ T8883] device veth1_vlan entered promiscuous mode [ 450.672459][ T26] audit: type=1800 audit(1774385299.811:40): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.954" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 450.721466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.734033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.754622][ T26] audit: type=1804 audit(1774385299.851:41): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.954" name="/newroot/180/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 450.788554][ T8883] device veth0_macvtap entered promiscuous mode [ 450.830335][ T8883] device veth1_macvtap entered promiscuous mode [ 450.921077][ T8883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.970885][ T8883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.982100][ T8883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.008948][ T9118] loop1: detected capacity change from 0 to 512 [ 451.013220][ T8883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.053217][ T8883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.086371][ T8883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.092267][ T9118] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 451.104879][ T8883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.150560][ T9118] ext4 filesystem being mounted at /215/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.202901][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.265085][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.287512][ T9125] loop5: detected capacity change from 0 to 256 [ 451.293002][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.352738][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.372194][ T9125] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.383418][ T9027] usb 3-1: Cannot set autoneg [ 451.388338][ T9027] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 451.432169][ T9125] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 451.436679][ T8883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.441143][ T9027] usb 3-1: USB disconnect, device number 10 [ 451.504165][ T9125] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 451.523014][ T8883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.543216][ T8883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.567574][ T8883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.600901][ T8883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.613845][ T8883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.640374][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 451.685775][ T9137] dlm: dev_write: no op 0 0 [ 451.691927][ T8883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.693751][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 451.731209][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.762645][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.770023][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 451.814330][ T8883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.829887][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 451.835275][ T8883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.866304][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 451.900671][ T8883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.922657][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 451.970272][ T8883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.976749][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 452.018173][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 452.062353][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 452.092553][ T9147] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 452.111410][ T4183] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 452.195972][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 452.356268][ T9147] bond1: (slave gretap1): making interface the new active one [ 452.427943][ T9147] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 452.439590][ T9142] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 452.529363][ T9152] device macvlan2 entered promiscuous mode [ 452.567551][ T9152] device bond1 entered promiscuous mode [ 452.600689][ T9152] device gretap1 entered promiscuous mode [ 452.646600][ T9152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 452.689547][ T9152] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 452.710889][ T9152] device bond1 left promiscuous mode [ 452.719666][ T9152] device gretap1 left promiscuous mode [ 452.817377][ T4642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.834861][ T4642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.851087][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.886685][ T4762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.901119][ T4762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.916307][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 452.927828][ T9167] fuse: Bad value for 'group_id' [ 452.937859][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.9.965'. [ 453.128678][ T4762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.287698][ T4762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.309593][ T9175] binder: 9169:9175 ioctl c0285840 200000000500 returned -22 [ 453.482311][ T4762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.545227][ T4762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.755042][ T9190] binder: 9188:9190 ioctl 400c620e 2000000067c0 returned -22 [ 453.813404][ T5771] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 454.155248][ T9205] dlm: dev_write: no op 0 0 [ 454.283480][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.469362][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.644248][ T5771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.964767][ T5771] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.100553][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.164556][ T5771] usb 3-1: config 0 descriptor?? [ 455.220950][ T9220] netlink: 'syz.5.979': attribute type 1 has an invalid length. [ 455.288134][ T9220] device macvlan2 entered promiscuous mode [ 455.313023][ T9220] device bond3 entered promiscuous mode [ 455.322422][ T9220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 455.343978][ T9220] device bond3 left promiscuous mode [ 455.695385][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.711234][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.731146][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.751526][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.771813][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.780239][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.788298][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.796608][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.807296][ T9224] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 455.816655][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.824633][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.843832][ T9216] chnl_net:caif_netlink_parms(): no params data found [ 455.858658][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.873311][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.880987][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.888836][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.896577][ T5771] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 455.907235][ T5771] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 455.929698][ T5771] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 456.020387][ T5771] usb 3-1: USB disconnect, device number 11 [ 456.048058][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.061007][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.070579][ T9216] device bridge_slave_0 entered promiscuous mode [ 456.085195][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.163587][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.185686][ T9216] device bridge_slave_1 entered promiscuous mode [ 456.273748][ T9246] fido_id[9246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 456.318354][ T9216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.377316][ T9216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.403517][ T4259] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 456.496930][ T9216] team0: Port device team_slave_0 added [ 456.515725][ T9216] team0: Port device team_slave_1 added [ 456.670686][ T4259] usb 6-1: Using ep0 maxpacket: 32 [ 456.762762][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.782303][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.823492][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.869383][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.910183][ T4259] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.983357][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.003647][ T9216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.039540][ T4259] usb 6-1: config 0 descriptor?? [ 457.131614][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.138791][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.167048][ T4259] hub 6-1:0.0: USB hub found [ 457.280438][ T8556] Bluetooth: hci0: command 0x0409 tx timeout [ 457.308855][ T9269] binder: 9265:9269 ioctl c0285840 200000000500 returned -22 [ 457.373568][ T4259] hub 6-1:0.0: 1 port detected [ 457.379368][ T9216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.498854][ T9216] device hsr_slave_0 entered promiscuous mode [ 457.528310][ T9216] device hsr_slave_1 entered promiscuous mode [ 457.549461][ T9216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.572744][ T9216] Cannot create hsr debugfs directory [ 457.743626][ T4259] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 457.754961][ T4259] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 457.893446][ T4259] usbhid 6-1:0.0: can't add hid device: -71 [ 457.899632][ T4259] usbhid: probe of 6-1:0.0 failed with error -71 [ 457.944522][ T4259] usb 6-1: USB disconnect, device number 13 [ 457.976659][ T9282] binder: BINDER_SET_CONTEXT_MGR already set [ 458.058267][ T4762] device hsr_slave_0 left promiscuous mode [ 458.068337][ T9282] binder: 9281:9282 ioctl 4018620d 200000004a80 returned -16 [ 458.078592][ T4762] device hsr_slave_1 left promiscuous mode [ 458.099913][ T4762] device bridge_slave_1 left promiscuous mode [ 458.118535][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.184802][ T4762] device bridge_slave_0 left promiscuous mode [ 458.193588][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.232750][ T4762] device veth1_macvtap left promiscuous mode [ 458.255424][ T4762] device veth0_macvtap left promiscuous mode [ 458.271996][ T4762] device veth1_vlan left promiscuous mode [ 458.303788][ T4762] device veth0_vlan left promiscuous mode [ 458.346593][ T9290] dlm: dev_write: no op 0 0 [ 459.178147][ T9296] loop5: detected capacity change from 0 to 1024 [ 459.209968][ T9296] EXT4-fs (loop5): Ignoring removed bh option [ 459.223352][ T9296] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 459.286534][ T9296] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,minixdf,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 459.373556][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 459.425488][ T9296] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1650539890 (1650539890 ns) > initial count (1634493796 ns). Using initial count to start timer. [ 459.656990][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 459.716491][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 459.742506][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.887183][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.730727][ T4762] bond0 (unregistering): Released all slaves [ 461.466812][ T9026] Bluetooth: hci0: command 0x040f tx timeout [ 461.649551][ T9332] binder: 9331:9332 ioctl c0285840 200000000500 returned -22 [ 461.880173][ T9327] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 462.188485][ T9216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 462.216410][ T9216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.294004][ T9216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 462.319661][ T9216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 462.357321][ T9349] binder_alloc: 9348: binder_alloc_buf, no vma [ 462.555843][ T9356] binder: 9355:9356 ioctl 400c620e 2000000067c0 returned -22 [ 462.668719][ T9216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.753580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.784475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.808102][ T9364] loop0: detected capacity change from 0 to 512 [ 462.827651][ T9216] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.929855][ T9366] dlm: dev_write: no op 0 0 [ 462.974036][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.140801][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.325495][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.332652][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.470228][ T9364] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,quota,quota,stripe=0x0000000000000003,lazytime,,errors=continue. Quota mode: writeback. [ 463.534444][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 463.636260][ T9364] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.668641][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.716992][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.816586][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.835523][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.842764][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.940687][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.066884][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.080656][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.202879][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.285309][ T9383] binder: 9381:9383 ioctl c0285840 200000000500 returned -22 [ 464.347782][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.563478][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.770916][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.909449][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.050376][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.095146][ T9216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.169048][ T9386] loop0: detected capacity change from 0 to 4096 [ 465.186542][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.221311][ T9386] EXT4-fs (loop0): inline encryption not supported [ 465.240501][ T9386] EXT4-fs (loop0): Test dummy encryption mode enabled [ 465.242004][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.277324][ T9386] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 465.294988][ T9386] System zones: 0-5 [ 465.330323][ T9386] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,barrier,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 465.415162][ T26] audit: type=1800 audit(1774385314.561:42): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1008" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 465.882141][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.913983][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.959832][ T9216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.039507][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.059654][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.187263][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.217091][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.267618][ T9216] device veth0_vlan entered promiscuous mode [ 467.294527][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.345863][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.410197][ T9216] device veth1_vlan entered promiscuous mode [ 467.580325][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 467.600453][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 467.661644][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 467.722594][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 467.932296][ T9411] binder: 9410:9411 ioctl 400c620e 2000000067c0 returned -22 [ 468.000442][ T9216] device veth0_macvtap entered promiscuous mode [ 468.039549][ T9216] device veth1_macvtap entered promiscuous mode [ 468.131943][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.168528][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.201144][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.280857][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.300568][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.312876][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.344489][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.365636][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.454147][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.490844][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.521005][ T9419] binder: BINDER_SET_CONTEXT_MGR already set [ 468.744665][ T9419] binder: 9418:9419 ioctl 4018620d 200000000040 returned -16 [ 468.829774][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.887766][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.020037][ T9428] loop5: detected capacity change from 0 to 4096 [ 469.032511][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.036274][ T9426] dlm: dev_write: no op 0 0 [ 469.234227][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.321546][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.363588][ T9216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.404195][ T9216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.478771][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.873198][ T9428] EXT4-fs (loop5): inline encryption not supported [ 469.994618][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.014377][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.015280][ T9428] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0003] [ 470.023020][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.055331][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.063732][ T9428] System zones: 0-5 [ 470.066269][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.078378][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.124438][ T9216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.132610][ T9428] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,usrquota,inlinecrypt,noload,errors=continue,noquota,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 470.133551][ T9216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.160468][ T9216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.241430][ T9438] binder: 9435:9438 ioctl c0285840 200000000500 returned -22 [ 470.299217][ T9216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.201468][ T4685] [ 472.203832][ T4685] ====================================================== [ 472.210587][ T9216] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 472.210896][ T4685] WARNING: possible circular locking dependency detected [ 472.225622][ T4685] syzkaller #0 Not tainted [ 472.230045][ T4685] ------------------------------------------------------ [ 472.237151][ T4685] syz-executor/4685 is trying to acquire lock: [ 472.240824][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.243342][ T4685] ffff88805de0cea8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 472.243393][ T4685] [ 472.243393][ T4685] but task is already holding lock: [ 472.243399][ T4685] ffff88805ddd2060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 472.243436][ T4685] [ 472.243436][ T4685] which lock already depends on the new lock. [ 472.243436][ T4685] [ 472.243441][ T4685] [ 472.243441][ T4685] the existing dependency chain (in reverse order) is: [ 472.243446][ T4685] [ 472.243446][ T4685] -> #2 (&ei->i_data_sem/2 [ 472.264153][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.267628][ T4685] ){++++}-{3:3}: [ 472.267648][ T4685] down_write+0x38/0x60 [ 472.318785][ T4685] ext4_map_blocks+0x8bf/0x1b30 [ 472.324177][ T4685] ext4_getblk+0x176/0x670 [ 472.329127][ T4685] ext4_bread+0x26/0x180 [ 472.333995][ T4685] ext4_quota_write+0x236/0x580 [ 472.339399][ T4685] do_insert_tree+0x115c/0x1970 [ 472.344784][ T4685] do_insert_tree+0x5b1/0x1970 [ 472.350656][ T4685] do_insert_tree+0x5b1/0x1970 [ 472.354596][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.355958][ T4685] do_insert_tree+0x5b1/0x1970 [ 472.368514][ T4685] qtree_write_dquot+0x361/0x4b0 [ 472.373986][ T4685] v2_write_dquot+0x108/0x190 [ 472.379279][ T4685] dquot_acquire+0x2d5/0x520 [ 472.384383][ T4685] ext4_acquire_dquot+0x2d9/0x4a0 [ 472.388825][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.389933][ T4685] dqget+0x778/0xeb0 [ 472.389956][ T4685] __dquot_initialize+0x3c3/0xcd0 [ 472.407756][ T4685] ext4_process_orphan+0x54/0x300 [ 472.411960][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.413576][ T4685] ext4_orphan_cleanup+0xad2/0x1320 [ 472.413603][ T4685] ext4_fill_super+0x8e25/0x95a0 [ 472.413619][ T4685] mount_bdev+0x287/0x3c0 [ 472.413634][ T4685] legacy_get_tree+0xe6/0x180 [ 472.413657][ T4685] vfs_get_tree+0x88/0x270 [ 472.413670][ T4685] do_new_mount+0x24a/0xa40 [ 472.413684][ T4685] __se_sys_mount+0x2e3/0x3d0 [ 472.413698][ T4685] do_syscall_64+0x4c/0xa0 [ 472.413714][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.457730][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.462368][ T4685] [ 472.462368][ T4685] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 472.462394][ T4685] down_read+0x44/0x2e0 [ 472.462420][ T4685] v2_read_dquot+0x4a/0x110 [ 472.493971][ T4685] dquot_acquire+0x152/0x520 [ 472.499096][ T4685] ext4_acquire_dquot+0x2d9/0x4a0 [ 472.504656][ T4685] dqget+0x778/0xeb0 [ 472.509296][ T4685] __dquot_initialize+0x3c3/0xcd0 [ 472.514915][ T4685] ext4_process_orphan+0x54/0x300 [ 472.520555][ T4685] ext4_orphan_cleanup+0xad2/0x1320 [ 472.526275][ T4685] ext4_fill_super+0x8e25/0x95a0 [ 472.531746][ T4685] mount_bdev+0x287/0x3c0 [ 472.536611][ T4685] legacy_get_tree+0xe6/0x180 [ 472.541800][ T4685] vfs_get_tree+0x88/0x270 [ 472.546735][ T4685] do_new_mount+0x24a/0xa40 [ 472.551754][ T4685] __se_sys_mount+0x2e3/0x3d0 [ 472.556994][ T4685] do_syscall_64+0x4c/0xa0 [ 472.561918][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.568317][ T4685] [ 472.568317][ T4685] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 472.575954][ T4685] __lock_acquire+0x2c42/0x7d10 [ 472.581342][ T4685] lock_acquire+0x19e/0x400 [ 472.586375][ T4685] __mutex_lock_common+0x1e3/0x2400 [ 472.592087][ T4685] mutex_lock_nested+0x17/0x20 [ 472.597356][ T4685] dquot_commit+0x5a/0x410 [ 472.602465][ T4685] ext4_write_dquot+0x1f0/0x360 [ 472.607823][ T4685] mark_all_dquot_dirty+0xf9/0x400 [ 472.613455][ T4685] __dquot_free_space+0x7ca/0xb90 [ 472.618982][ T4685] ext4_free_blocks+0x1b2b/0x24d0 [ 472.624512][ T4685] ext4_ext_remove_space+0x211e/0x42b0 [ 472.630473][ T4685] ext4_ext_truncate+0x192/0x240 [ 472.635911][ T4685] ext4_truncate+0xa09/0x10f0 [ 472.641103][ T4685] ext4_evict_inode+0xb4f/0x1090 [ 472.646545][ T4685] evict+0x4c9/0x8d0 [ 472.650946][ T4685] vfs_rmdir+0x3b4/0x430 [ 472.655743][ T4685] do_rmdir+0x2a1/0x740 [ 472.660409][ T4685] __x64_sys_unlinkat+0xc0/0xe0 [ 472.665768][ T4685] do_syscall_64+0x4c/0xa0 [ 472.670863][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.677266][ T4685] [ 472.677266][ T4685] other info that might help us debug this: [ 472.677266][ T4685] [ 472.687485][ T4685] Chain exists of: [ 472.687485][ T4685] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 472.687485][ T4685] [ 472.701203][ T4685] Possible unsafe locking scenario: [ 472.701203][ T4685] [ 472.708639][ T4685] CPU0 CPU1 [ 472.713993][ T4685] ---- ---- [ 472.719423][ T4685] lock(&ei->i_data_sem/2); [ 472.724003][ T4685] lock(&s->s_dquot.dqio_sem); [ 472.731374][ T4685] lock(&ei->i_data_sem/2); [ 472.738467][ T4685] lock(&dquot->dq_lock); [ 472.742863][ T4685] [ 472.742863][ T4685] *** DEADLOCK *** [ 472.742863][ T4685] [ 472.750985][ T4685] 5 locks held by syz-executor/4685: [ 472.756263][ T4685] #0: ffff888017d96460 (sb_writers#5){++++}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 472.765593][ T4685] #1: ffff88805ddd49b8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: do_rmdir+0x1c1/0x740 [ 472.775688][ T4685] #2: ffff888017d96650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 472.785633][ T4685] #3: ffff88805ddd2060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 472.795564][ T4685] #4: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 472.804709][ T4685] [ 472.804709][ T4685] stack backtrace: [ 472.810799][ T4685] CPU: 0 PID: 4685 Comm: syz-executor Not tainted syzkaller #0 [ 472.818824][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.828910][ T4685] Call Trace: [ 472.832206][ T4685] [ 472.835142][ T4685] dump_stack_lvl+0x188/0x250 [ 472.839826][ T4685] ? load_image+0x400/0x400 [ 472.844325][ T4685] ? show_regs_print_info+0x20/0x20 [ 472.849635][ T4685] ? print_circular_bug+0x12b/0x1a0 [ 472.854816][ T4685] check_noncircular+0x296/0x330 [ 472.859753][ T4685] ? add_chain_block+0x940/0x940 [ 472.864701][ T4685] ? lockdep_lock+0xf1/0x1f0 [ 472.869373][ T4685] ? mark_lock+0x94/0x320 [ 472.873778][ T4685] __lock_acquire+0x2c42/0x7d10 [ 472.878664][ T4685] ? __bfs+0x2a3/0x5c0 [ 472.882719][ T4685] ? verify_lock_unused+0x140/0x140 [ 472.887999][ T4685] ? check_noncircular+0x189/0x330 [ 472.893108][ T4685] ? add_chain_block+0x940/0x940 [ 472.898047][ T4685] ? lockdep_lock+0xf1/0x1f0 [ 472.902665][ T4685] ? lockdep_unlock+0x143/0x2e0 [ 472.907783][ T4685] lock_acquire+0x19e/0x400 [ 472.912282][ T4685] ? dquot_commit+0x5a/0x410 [ 472.916966][ T4685] ? __might_sleep+0xf0/0xf0 [ 472.921581][ T4685] ? read_lock_is_recursive+0x10/0x10 [ 472.926986][ T4685] ? mark_lock+0x94/0x320 [ 472.931487][ T4685] ? dquot_commit+0x5a/0x410 [ 472.936067][ T4685] __mutex_lock_common+0x1e3/0x2400 [ 472.941359][ T4685] ? dquot_commit+0x5a/0x410 [ 472.945944][ T4685] ? __might_sleep+0xf0/0xf0 [ 472.950633][ T4685] ? mutex_lock_io_nested+0x60/0x60 [ 472.955823][ T4685] mutex_lock_nested+0x17/0x20 [ 472.960571][ T4685] dquot_commit+0x5a/0x410 [ 472.964973][ T4685] ? __ext4_journal_start_sb+0x1bd/0x360 [ 472.970597][ T4685] ext4_write_dquot+0x1f0/0x360 [ 472.975441][ T4685] mark_all_dquot_dirty+0xf9/0x400 [ 472.980548][ T4685] __dquot_free_space+0x7ca/0xb90 [ 472.985565][ T4685] ext4_free_blocks+0x1b2b/0x24d0 [ 472.990753][ T4685] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 472.998435][ T4685] ? do_raw_read_unlock+0x39/0x70 [ 473.003456][ T4685] ? _raw_read_unlock+0x24/0x40 [ 473.008378][ T4685] ? ext4_is_pending+0x176/0x1c0 [ 473.013651][ T4685] ext4_ext_remove_space+0x211e/0x42b0 [ 473.019199][ T4685] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 473.025147][ T4685] ? ext4_es_remove_extent+0x24f/0x3e0 [ 473.030599][ T4685] ext4_ext_truncate+0x192/0x240 [ 473.035612][ T4685] ext4_truncate+0xa09/0x10f0 [ 473.040286][ T4685] ? __ext4_mark_inode_dirty+0x700/0x700 [ 473.046031][ T4685] ext4_evict_inode+0xb4f/0x1090 [ 473.051162][ T4685] ? _raw_spin_unlock+0x24/0x40 [ 473.056010][ T4685] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 473.061896][ T4685] ? do_raw_spin_unlock+0x11d/0x230 [ 473.067080][ T4685] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 473.072958][ T4685] evict+0x4c9/0x8d0 [ 473.076865][ T4685] ? proc_nr_inodes+0x320/0x320 [ 473.081817][ T4685] ? do_raw_spin_unlock+0x11d/0x230 [ 473.087015][ T4685] ? _raw_spin_unlock+0x24/0x40 [ 473.092037][ T4685] ? iput+0x706/0x8a0 [ 473.096007][ T4685] vfs_rmdir+0x3b4/0x430 [ 473.100239][ T4685] do_rmdir+0x2a1/0x740 [ 473.104427][ T4685] ? __phys_addr_symbol+0x2b/0x70 [ 473.109438][ T4685] ? d_delete_notify+0x150/0x150 [ 473.114360][ T4685] ? strncpy_from_user+0x1fb/0x360 [ 473.119501][ T4685] ? getname_flags+0x1fe/0x500 [ 473.124248][ T4685] __x64_sys_unlinkat+0xc0/0xe0 [ 473.129093][ T4685] do_syscall_64+0x4c/0xa0 [ 473.133505][ T4685] ? clear_bhb_loop+0x30/0x80 [ 473.138170][ T4685] ? clear_bhb_loop+0x30/0x80 [ 473.142832][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 473.148732][ T4685] RIP: 0033:0x7f175d24a8b7 [ 473.153143][ T4685] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.173034][ T4685] RSP: 002b:00007ffca1a92e78 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 473.181897][ T4685] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f175d24a8b7 [ 473.190031][ T4685] RDX: 0000000000000200 RSI: 00007ffca1a94020 RDI: 00000000ffffff9c [ 473.197999][ T4685] RBP: 00007f175d2e1050 R08: 0000000000008560 R09: 00000000ffffffff [ 473.205974][ T4685] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffca1a94020 [ 473.213962][ T4685] R13: 00007f175d2e1050 R14: 00000000000733a9 R15: 00007ffca1a961e0 [ 473.221934][ T4685] [ 473.236641][ T9026] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 473.277945][ T9026] Bluetooth: hci2: Injecting HCI hardware error event [ 473.294770][ T4186] Bluetooth: hci2: hardware error 0x00 [ 474.034685][ T4762] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.108852][ T4762] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.217094][ T4762] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.306742][ T4762] batman_adv: batadv0: Removing interface: netdevsim0 [ 474.333675][ T4762] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.881694][ T4762] bond1: (slave gretap1): Releasing active interface [ 475.207572][ T4762] device hsr_slave_0 left promiscuous mode [ 475.214458][ T4762] device hsr_slave_1 left promiscuous mode [ 475.227933][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.235837][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.245230][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.252790][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.261760][ T4762] device bridge_slave_1 left promiscuous mode [ 475.269699][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.278577][ T4762] device bridge_slave_0 left promiscuous mode [ 475.287749][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.300677][ T4762] device veth1_macvtap left promiscuous mode [ 475.306854][ T4762] device veth0_macvtap left promiscuous mode [ 475.312968][ T4762] device veth1_vlan left promiscuous mode [ 475.319314][ T4762] device veth0_vlan left promiscuous mode [ 475.387350][ T4762] bond3 (unregistering): Released all slaves [ 475.401242][ T4762] bond2 (unregistering): Released all slaves [ 475.412465][ T4762] bond1 (unregistering): Released all slaves [ 475.486647][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 475.502300][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 475.517369][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.534023][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.601193][ T4762] bond0 (unregistering): Released all slaves